Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/QTZtVWlcZP-AqNZipnvJ4k_Nda0.roa
File: QTZtVWlcZP-AqNZipnvJ4k_Nda0.roa (raw, json)
Hash identifier: kaIoI6YSjzdhZyW7MFIn5FMkFEGkChOl7/xrW9cw8vs=
Subject key identifier: 41:36:6D:55:69:5C:64:FF:80:A8:D6:62:A6:7B:C9:E2:4F:CD:75:AD
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 19EE6123
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/QTZtVWlcZP-AqNZipnvJ4k_Nda0.roa
Signing time: Thu 19 May 2022 06:21:18 +0000
ROA not before: Thu 19 May 2022 06:21:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211144
IP address blocks: 2a06:a005:431::/48 maxlen: 48
2a06:a005:9f0::/44 maxlen: 48
2a06:a005:440::/44 maxlen: 48
2a06:a005:890::/44 maxlen: 48
2a06:a005:18::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 435052835 (0x19ee6123)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: May 19 06:21:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=41366d55695c64ff80a8d662a67bc9e24fcd75ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b1:19:52:6b:2a:54:87:22:35:18:6d:de:4a:
7b:e1:28:f0:75:8c:c4:ff:80:41:a7:cc:d9:76:90:
4c:45:fe:19:8e:e7:af:66:e4:92:a3:de:d3:2f:31:
ae:03:18:77:92:38:3c:f8:19:df:60:ca:4c:0c:11:
b9:db:26:dd:04:d2:83:55:a0:24:5c:ff:42:6a:5c:
fc:1f:8c:d8:3b:da:14:8b:51:b7:e6:4a:35:4f:2a:
89:43:96:7c:8b:56:78:84:d6:fa:49:16:e0:0f:27:
81:ef:82:50:2f:16:af:70:a2:c7:4a:99:2f:25:43:
2e:8a:cf:d6:e8:3b:9e:64:e0:bf:a8:30:11:93:87:
b1:33:e2:21:a5:db:9c:b5:3a:65:5b:89:2a:7f:46:
2f:bc:d5:61:ad:fb:7b:5d:ac:8e:d4:3e:10:b4:2a:
d0:30:d8:ad:c6:22:6b:1d:c6:2f:a7:87:4a:82:25:
a2:18:01:6f:b8:76:aa:83:c5:da:31:0d:4d:19:35:
44:fb:3c:2f:a2:8b:a6:28:f4:a6:8a:5d:a3:f9:f7:
dd:0d:b6:2f:c3:e6:bc:c4:ec:68:d5:0b:66:b1:62:
ab:fc:ba:7f:88:f4:18:3f:f1:03:97:b6:69:f9:9f:
5d:68:77:f5:02:28:94:df:86:ba:94:61:c7:38:5d:
fd:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:36:6D:55:69:5C:64:FF:80:A8:D6:62:A6:7B:C9:E2:4F:CD:75:AD
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/QTZtVWlcZP-AqNZipnvJ4k_Nda0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:18::/48
2a06:a005:431::/48
2a06:a005:440::/44
2a06:a005:890::/44
2a06:a005:9f0::/44
Signature Algorithm: sha256WithRSAEncryption
84:e1:18:95:06:90:00:54:a5:53:57:f2:1f:c6:d9:32:26:3e:
d1:91:c5:cb:f0:a9:9b:94:8c:df:09:33:b2:18:c0:6c:fe:5e:
cf:58:80:12:40:07:44:e7:d7:ff:53:48:d6:92:90:73:0c:a5:
f9:8d:41:2c:5f:03:27:14:9c:97:c9:33:96:86:26:6a:5a:56:
68:d7:35:04:ce:24:54:a7:15:be:7f:01:4f:95:7c:2f:81:2d:
8f:f1:70:41:cb:a6:4e:4a:a4:b2:a5:8d:62:c6:cc:a7:c7:e0:
e5:a6:81:5a:56:71:a2:39:ad:13:ba:72:bd:ed:3b:99:88:e5:
52:85:92:a4:1f:da:33:5f:56:36:0c:bb:64:86:7f:ae:ad:2f:
ef:a0:6c:e5:3e:ac:8d:01:46:e6:73:ca:89:f7:1a:46:a1:97:
12:57:a5:33:bb:c8:4c:fd:a3:03:ac:15:ba:8a:b5:02:a1:07:
c9:6e:e5:7a:6c:19:82:28:9f:ea:b3:e0:eb:e7:92:ba:90:50:
23:22:cc:d7:54:f8:c8:b7:2c:77:ff:85:52:f7:86:fe:03:54:
af:6d:61:e1:66:7c:ab:ce:c6:bc:99:4f:7d:43:92:6e:f3:da:
fa:cf:3d:76:9a:ff:68:77:da:07:0a:40:46:0c:29:a2:09:ec:
6d:27:7f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:45:03 2025 by rpki-client